Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay ...
Help Net Security

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

Attackers uploaded yay and paru lookalikes to the Arch Linux AUR, using typosquatting to run malware with root privileges on ...
BleepingComputer

Over 400 Arch Linux packages compromised to push rootkit, infostealer

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. A report from the open-source intelligence ...
thenextweb.com

Attackers hijacked over 1,500 Arch Linux packages to steal developers’ secrets, no hacking required

The malware never touched Arch Linux's official repositories. It didn't have to: the attackers simply adopted abandoned packages in the community-run AUR and rewrote their build scripts to plant a ...
XDA Developers

Arch Linux's AUR is under attack as malicious packages begin flooding the repository

Simon is a Computer Science BSc graduate who has been writing about technology since 2014, and using Windows machines since 3.1. After working for an indie game studio and acting as the family's go-to ...